Risk Management Specialist

The Third Party Criticality & Resiliency Expert is responsible for developing, implementing, and overseeing strategies to assess and enhance the criticality and resiliency of third party’s across Oracle’s supply chain, with a specific focus on the impact of information security. This role ensures that critical third parties are identified, have robust risk management and business continuity plans to mitigate disruptions and maintain operational stability. The expert will lead efforts to fortify Oracle’s supply chain through strategic partnerships, risk assessments, and continuous improvement initiatives working across all Lines of Business.

Job description displayed in the job posting

Strategic Planning

• Develop and implement strategic plans to assess and enhance third party criticality and resiliency.
• Identify and prioritize critical third party’s based on their impact on Oracle’s operations and supply chain.
• Establish and maintain a framework for continuous monitoring and improvement of third party resiliency and criticality.

Risk Assessment and Management

• Ensure comprehensive risk assessments of key third party’s business continuity and resiliency plans are undertaken by Lines of Business.
• Identify vulnerabilities and develop mitigation strategies to address potential disruptions.
• Collaborate with Lines of Business and these to Third-Parties to ensure alignment with Oracle’s risk management and resiliency standards.

Third Party Due Diligence and Audits

• Conduct thorough due diligence reviews on new and existing Third Party’s to verify compliance with resiliency and criticality requirements.
• Oversee regular audits of Third Party risk management practices, business continuity plans, and criticality assessments.
• Ensure Third Party adherence to contractual obligations related to resiliency and criticality.

Collaboration and Stakeholder Engagement

• Work collaboratively x-LoB to integrate third party criticality and resiliency into broader business strategies.
• Act as the primary GIS point of contact for third party resiliency and criticality issues and coordinate with third party’s on improvement initiatives.
• Communicate insights, findings, and recommendations to senior management and key stakeholders.

Incident Response and Recovery

• Lead the development and testing of incident response and recovery plans involving critical third party’s.
• Coordinate and manage responses to incidents affecting critical third party’s and the supply chain.
• Analyze the impact of disruptions on the supply chain and implement corrective actions.

Continuous Improvement and Innovation

• Stay updated on industry trends, regulatory changes, and good practices in third party resiliency and criticality.
• Drive continuous improvement initiatives to enhance third party risk management and resiliency programs.
• Innovate and implement new tools, technologies, and methodologies to improve third party resiliency and criticality assessments.